September 2000 - Zope

newbie question: installing ZSiteMap and ZPhotoAlbum
by Tamara Temple 05 Sep '00

05 Sep '00

Hi all, My first posting here, please forgive if this is obvious, cause it isn't to me. I already checked the How-To's and searched the zope-list archives and came up with nothing. I downloaded the two zexp files for ZSiteMap and ZPhotoAlbum, and put them in the import directory. When I try to import them, I get an error and a traceback saying that "this operation isn't support by ZSiteMap" (or ZPhotoAlbum, depending). There are no instructions with either one on how to install them. What do I need to do in order for these to work? This newbie thanks you in advance. -- Tamara Temple <^)~ tambulk(a)email.com Perhaps loving something is the only starting place there is for making your life your own. -- Alice Koller

2 1

RE: [Zope] Folder and SQL security
by Chris McDonough 05 Sep '00

05 Sep '00

On Tue, 5 Sep 2000, George Osvald wrote: > My sql works now and security is satisfactory so thank you. The only thing > that remains in question is that one subfolder. I created a user folder > inside, set all the security and it does not do what I want. I want to > restrict any access including viewing for nobody. Only authorised customers > would be able to view the page. After turning off all the security options > though I am still able to view the pages as nobody. How do I prevent that? Do you have "acquire permissions" set on all the permissions of the folder? Have you tried turning it off? This may be a wild goose chase because I'm sort of guessing at your problem. Your message has generalizations like "that one subfolder" (what subfolder? what are its settings?), "set all the security" (how?), "does not do what I want" (what do you want? exactly how does it fail, can you give a concrete example?) and "the page" (what page?). It'd be helpful to define these, because as much as I try, I can't read minds. :-) HTH, C > > > > George wrote: > > > > > > Security in ZOPE is very puzzling. If I have certain rules set for the > > > root folder, can I set something different for the sub folders? > > > > Sure... for general security information see both > > http://www.zope.org/Members/michel/ZB (the Zope book security chapter, > > mostly finished) and http://www.zope.org/Members/mcdonc/PDG (security > > chapter mostly finished). > > > > > Any > > > changes seem to have no effect at all. > > > > can you be more specific? > > > > > I am especially wandering about > > > setting for anonymous user. I'd like to give them only 'viewing' > > > privilege but that does not work. > > > > How doesn't it work? > > > > > The site is not functional at all and > > > asks for the password even for the viewing. Then I enable 'access the > > > content' and the site works as long as I do not try to use sql. > > > > Yes, "access contents information" is equivalent to allowing the user to > > list the objects in an object manager. It's given to anonymous by > > default most of the time, and is probably required for most operations. > > > > > When I > > > how ever enable 'use sql methods' permission they can access my > > > database, delete and add entries to it. > > > > This should have nothing to do with 'access contents information'. > > There should be permissions available to restrict the use of sql > > methods. Have you seen them? > > > > > What do I have to do to allow > > > anonymous viewers to just view the site > > > > Give them "view" and "access contents information" permissions. > > Depending on the products you've got installed and the operations you > > want the users to be able to carry out, you may need to give them other > > permissions. > > > > > (keep in mind that I am using a > > > couple of zsql methods for embedding of data in my html) I also want to > > > have one of the sub folders not accessible to any one but me. > > > Can you help anyone? > > > Chris McDonough Digital Creations, Publishers of Zope http://www.zope.org

1 0

Fourth Posting, is this really that difficult or have I been black balled :) balled :)
by Daniel Rusch 04 Sep '00

04 Sep '00

I've created a folderish product. When I select that product from the available objects list, thus creating an instance of that product, I can create objects like dtml document and dtml method in the new folderish object (very similar to what happens when you instantiate a folder object, you can have a dtml method created in the new folder). The question is why can't I create objects from the Products directory, such as Local File System????? The code below works great, I get a dtml document, two folders each with a dtml method in them.... HOW CAN I CREATE A LOCAL FILE SYSTEM OR ANY OTHER OBJECT FROM THE PRODUCTS DIRECTORY IN THIS MANAGE_ADD FUNCTION??????? def manage_addSimpleSite(self, id, title='', createNewFolder=0, createEditFolder=0, REQUEST=None): """Add a new SimpleSite object with id *id*. If the 'createNewFolder' and 'createEditFolder' parameters are set to any true value, an 'New sub Folder' and an 'edit sub Folder' objects are created respectively in the new SimpleSite. """ ob=SimpleSite() ob.id=id ob.title=title self._setObject(id, ob) try: user=REQUEST['AUTHENTICATED_USER'] except: user=None ob.manage_addDTMLDocument(id='index_html', title='') if createNewFolder: if (user is not None) and not ( user.has_permission('Add User SimpleSites', self)): raise 'Unauthorized', ( 'You are not authorized to add User SimpleSites.' ) ob.manage_addFolder(id='New'+id, title='', createPublic=1) if createEditFolder: if (user is not None) and not ( user.has_permission('Add Documents, Images, and Files', self)): raise 'Unauthorized', ( 'You are not authorized to add DTML Documents.' ) ob.manage_addFolder(id='Edit'+id, title='', createPublic=1) if REQUEST is not None: return self.manage_main(self, REQUEST, update_menu=1) Thanks, Dan

3 5

Re: [Zope] Regaining lost privileges
by Dieter Maurer 04 Sep '00

04 Sep '00

Andrew Kenneth Milton writes: > Is there anyway to regain 'root' privs from inside a zope product? > > Using the -u flag to start causes the privs to be permanently gone because > z2.py uses setuid + setgid (and python doesn't seem to define sete[ug]id, at > least not on my system). > > Other than running zope as root permanently (which I really would like to > avoid), does anyone have any quick ideas on how to achieve this? The same trick could be used by any process to gain root privileges.... It is easy to implement a Python wrapper for the sete[ug]id. Dieter

2 1

.
by Matthew Burleigh 04 Sep '00

04 Sep '00

-- - Matthew Burleigh - Systems Administrator, Digital Creations - publishers of Zope. - (888)344-4332 -- http://www.digicool.com - http://www.zope.org

2 1

How does one rename document ids?
by Sean Kelley 04 Sep '00

04 Sep '00

Hi, I have a number of dtml documents without the form "name_html". I would like to rename everything in a particular folder to name_html from name. Is there a way to do this? Thanks

1 0

Re: [Zope] Migrating passwords from Apache to Zope?
by Dieter Maurer 04 Sep '00

04 Sep '00

Marcin Kasperski writes: > Is it possible to smoothly migrate accounts and passwords from Apache to > Zope? > > More details: I keep Apache accounts in some file of the format > > username:encoded_password > > where username is plaintext username and encoded_password is the > password encoded in the normal Unix way (via crypt function).... There is a GUF (Generic User Folder) HowTo that explains how to use encryted passwords in the same way as you do. After you have set up GUF (very good explanation in the HowTo), all you need to do is place your "username,password" pairs into the database. A small Python script can be used for this. It probably would use the DB Api to control the database. Dieter

1 0

domains (acl_users) and access via proxy
by Didier Georgieff 04 Sep '00

04 Sep '00

Hello, Our users are acessing to the Zope server thru corporate (ministers) proxys. I can't get the "domains" working, while trying (agriculture.gouv.fr, gouv.fr, fr) even with simple one. I'm suspecting some changes in the REQUEST made by the corporate proxys. Is there any doc about what REQUEST variable is used in the "domains" restriction ? (I have a HTTP_FORWARDED with the *proxy* name (unfortunately without the .gouv.fr). I can't find anything on the site and the list either. Thanks in advance.

1 0

Re: [Zope] Images slow rendering problem
by Dieter Maurer 04 Sep '00

04 Sep '00

Pierre-Julien Grizel writes: > I already posted this message several monthes ago, expecting a new Zope > version would fix the problem, but... > > > I have some images on my pages (let's say 10 - not a lot), rendered > either by dtml-var or a manual <IMG> tag. > When I render the page on some of my LAN boxes (especially with IE), > some images doesn't load at the first time. I need to reload the page to > make them appear. When I monkeyly hit the 'F5' key, some images do not > show again. Argl. Anoying.... > > The problem is worst ever through Internet. I, myself, have seen a very similar problem -- with Netscape 4.5.1 under Solaris 2.7. I tried to analyse it, but failed. I can say, that is was *not* the Netscape image bug (Netscape sends If-Modified-Since headers with two year digits). Inside Zope's "OFS.Image.File.index_html" everything looks fine. Dieter

1 0

Re: [Zope] Way to list vocabulary words specific to a page?
by Dieter Maurer 04 Sep '00

04 Sep '00

Kevin Smith writes: > I am interested in showing the vocabulary words indexed for the page being viewed, to be used as meta keyword data. > > Is this possible? Zope does not manage vocabulary words on a page basis. Therefore, you cannot simply ask: "give me the words for this given page". With some effort, you can emulate ZCatalogs word splitting: given an object, "o", and an attribute, "a", to be indexed, ZCatalog first determines "o"s "a" value: val= getattr(o,a) if callable(val): val= val() The resulting string is then fed to a C implemented module called "Splitter" which splits the text into a sequence of words. It is this sequence, you are interested in. You will probably need to write an external method. You will find the relevant code in "SearchIndex.UnTextIndex". Dieter

1 0